From: "Robert White" <rwhite@casabyte.com>
To: "=?iso-8859-1?Q?'Markus_H=E4stbacka'?=" <midian@ihme.org>,
       "'Justin Piszcz'" <jpiszcz@lucidpixels.com>
Cc: "'Kernel Mailinglist'" <linux-kernel@vger.kernel.org>
Subject: RE: Spam/LKML
Date: Tue, 23 Sep 2003 15:17:31 -0700
Organization: Casabyte, Inc.
Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA2ZSI4XW+fk25FhAf9BqjtMKAAAAQAAAA/3qAtyqDgUWIolxPnInj5QEAAAAA@casabyte.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 8BIT
In-Reply-To: <1064341489.12580.4.camel@midux>
Importance: Normal
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1922
Lines: 48

It happens because someone on the list has the virus.  The virus, among
other thing, harvests the email addresses to forge the From: header.

So they (probably multiples of them) run their unpatched and virus-infected
Outlook.  Each of them both generates email to all the addresses they see
and each of those emails is "From" one of the other addresses they see.

So it harvests the current inbox, and does a splatter mailing.  When the
mail servers see the email and bounce it, it is bounced to your address
instead of the real senders'.

Shame there are people that think they are smart enough to play in this
space (LKML) and dumb enough to open an email attachment that they don't
fully understand/appreciate.

Further stupidity is using the "preview pane".  In Outlook, the preview pane
"opens" the email, even if you are doing a left-click delete.  Since some of
the viruses (and almost all of the spam) will validate the email account as
interactively in use when you open it, they get hammered extra-hard.

"Frend's don't ask friends to open Microsoft Documents" 

Rob White

-----Original Message-----
From: linux-kernel-owner@vger.kernel.org
[mailto:linux-kernel-owner@vger.kernel.org] On Behalf Of Markus H?stbacka
Sent: Tuesday, September 23, 2003 11:25 AM
To: Justin Piszcz
Cc: Kernel Mailinglist
Subject: Re: Spam/LKML

I've noticed this too. I get around 100 mails/day of the new "security
update". And then I get 50 more which tell's me that some message could
not be delivered, which is of course a lie. None of the mail's contain
"To: ...snip..." and I think this happens because my mail adress is in
LKML.

Regards,
----
Markus H?stbacka <midian@ihme.org>


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/